5df1bb39685813d7e42ce03a42554cc119bd9e1eb4eefc4ddba59b06866beeee | Triage

Analysis

max time kernel
150s
max time network
118s
platform
windows7_x64
resource
win7-en-20211014
submitted
08-11-2021 19:13

Sharing

Report Analysis Logs

General

Target

Εν τη ζώνη τω ν μεγάλ ων λιμν ών, επί όλης τ ης ευρε ίας �.pdf
Size

196KB
MD5

b8a870d66bde888a338c33c6f057c3d0
SHA1

7dbd9a1ae2c02e1609f7a8903fd20849ba1c8d25
SHA256

5df1bb39685813d7e42ce03a42554cc119bd9e1eb4eefc4ddba59b06866beeee
SHA512

d426c57081a6288bffbb41d4b6825b343c40263ed1a4e41132b7ff6bf2246e8bde52601962eb141474c3739b48013c950fd59a24512cd919b477f8b6490a5ad8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

736 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

736 AcroRd32.exe
736 AcroRd32.exe
736 AcroRd32.exe
736 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Εν τη ζώνη τω ν μεγάλ ων λιμν ών, επί όλης τ ης ευρε ίας �.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:736

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/736-55-0x0000000075821000-0x0000000075823000-memory.dmp

Filesize
8KB

Download